Uncaught exception in .NET allows an authorized attacker to elevate privileges locally.
Weakness
The product does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Visual_studio_2022 | Microsoft | 17.14.0 (including) | 17.14.38 (excluding) |
| Visual_studio_2026 | Microsoft | 18.8.0 (including) | 18.8.3 (excluding) |
| Red Hat Enterprise Linux 10 | RedHat | dotnet8.0-0:8.0.130-1.el10_2 | * |
| Red Hat Enterprise Linux 10 | RedHat | dotnet9.0-0:9.0.120-1.el10_2 | * |
| Red Hat Enterprise Linux 8 | RedHat | dotnet8.0-0:8.0.130-1.el8_10 | * |
| Red Hat Enterprise Linux 8 | RedHat | dotnet10.0-0:10.0.111-1.el8_10 | * |
| Red Hat Enterprise Linux 8 | RedHat | dotnet9.0-0:9.0.120-1.el8_10 | * |
| Red Hat Enterprise Linux 9 | RedHat | dotnet8.0-0:8.0.130-1.el9_8 | * |
| Red Hat Hardened Images | RedHat | dotnet9-0-main-9.0.119-2.hum1 | * |
| Red Hat Hardened Images | RedHat | dotnet10-0-main-10.0.11-1.hum1 | * |